v2.174.0

What's Changed

• Add explicit range transition for conmon by @0xC0ncord in #166

Full Changelog: v2.173.2...v2.174.0

v2.173.2

What's Changed

• Update file labeling type for /var/lib/kubelet by @fire833 in #165

Full Changelog: v2.173.1...v2.173.2

v2.173.1

What's Changed

• Add missing dbus class declaration into container_runtime_run() by @zpytela in #163

Full Changelog: v2.173.0...v2.173.1

v2.173.0

Remove lockdown allow rules

v2.172.1

What's Changed

• remove k3s fcontexts by @dweomer in #162

Full Changelog: v2.172.0...v2.172.1

v2.172.0

Allow container domains to be used by user roles

v2.171.0

What's Changed

• Remove noxattrfs from container_file_t by @0xC0ncord in #157
• some entries under the k3s data-dir should not be container_runtime_exec_t by @dweomer in #156

New Contributors

• @0xC0ncord made their first contribution in #157

Full Changelog: 2.170.0...v2.171.0

v2.170.0

Allow container_runtime create all tmpfs content as container_runtime_tmpfs_t
Allow containers to create lnk_file on tmpfs_t directories.

v2.169.0

Allow container_logreader_t to real logfile sym links.

v2.168.0

Allow iptables to use fifo files of a container runtime